PKI & Secure API Engineer (Contract)

Stefanini; Dearborn (MI); Hybrid; USD 84,000 - 91,000; Full time

Job summary

Stefanini Group is seeking a Software Engineer in Dearborn, MI to own PKI and secure API services across vehicle product ecosystems. You will design, build, deploy, and maintain high-assurance cryptographic systems and APIs for certificate issuance, lifecycle management, revocation, and integration.

The role requires 6+ years IT, 4+ years software engineering with secure coding, strong cryptography (RSA, ECC, AES, X.509), and experience deploying cloud/Kubernetes environments and PKI platforms.

Qualifications

• Bachelor's degree in Computer Science / Engineering.
• 6+ years IT experience with 4+ years in software engineering and secure coding practices.
• Strong knowledge of cryptographic algorithms and standards (RSA, ECC, AES, X.509).
• Experience owning customer-facing products from ideation to launch.

Responsibilities

• Lead PKI and Key Management services lifecycle for vehicle products and ecosystem.
• Design and develop RESTful APIs and web services (CRL/OCSP, ACME, Certificate Issuance, signing, key rotation, lifecycle management).
• Implement access control using OAuth or mTLS; ensure least privilege access.
• Deploy applications via CI/CD pipelines in on-prem and cloud Kubernetes environments.
• Monitor and address security vulnerabilities via SAST/DAST and testing throughout development.

Skills

PKI

Secure APIs

C#

.NET Core

Cloud Infrastructure

Google Cloud Platform

PostgreSQL

Software Testing

Cyber Security

Agile Software Development

Software Development Lifecycle

Bouncy Castle Cryptographic

Application Development

RESTful APIs

Education

Bachelor's degree in Computer Science / Engineering

Tools

Kubernetes

OpenShift

Job description

Stefanini Group is seeking a Software Engineer in Dearborn, MI to own PKI and secure API services across vehicle product ecosystems. You will design, build, deploy, and maintain high-assurance cryptographic systems and APIs for certificate issuance, lifecycle management, revocation, and integration.

The role requires 6+ years IT, 4+ years software engineering with secure coding, strong cryptography (RSA, ECC, AES, X.509), and experience deploying cloud/Kubernetes environments and PKI platforms.